CVE-2008-5939: XSS
Cross-site scripting (XSS) vulnerability in index.php in MODx CMS 0.9.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a JavaScript event in the username field, possibly related to snippet.ditto.php. NOTE: some sources list the id parameter as being affected, but this is probably incorrect based on the original disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5939?
CVE-2008-5939 has a medium severity level due to its ability to allow remote attackers to inject scripts.
How do I fix CVE-2008-5939?
To fix CVE-2008-5939, upgrade to MODx CMS version 0.9.6.3 or later.
What systems are affected by CVE-2008-5939?
CVE-2008-5939 affects MODx CMS versions 0.9.2.1 and earlier, including 0.9.6.2.
What type of vulnerability is CVE-2008-5939?
CVE-2008-5939 is a cross-site scripting (XSS) vulnerability.
Can CVE-2008-5939 be exploited without authentication?
Yes, CVE-2008-5939 can be exploited by attackers without needing authentication.